Compliance
Security Policy
At List It Now, security is built into every layer. We implement technical, organisational, and procedural measures to protect your information and platform integrity.
Last updated: April 8, 2026
This Security Policy explains the technical, organisational, and procedural measures we implement to protect your personal information, account data, property listings, payment transactions, and platform integrity.
By using List It Now, you acknowledge and agree to the security practices described in this policy.
1. Scope of This Security Policy
1.1 Who This Policy Covers
- General Users (Buyers, Tenants, Visitors)
- Sellers and Landlords
- Registered Agents and Brokers
- Real Estate Developers
- Vybtek IT Solutions Staff & Contractors
1.2 What This Policy Covers
- Account & Login security encryption
- Payment and transaction protocols
- Infrastructure and server security
- Incident detection and response
2. Platform Infrastructure Security
2.1 Hosting and Server Security
Hosted on enterprise-grade cloud with multi-layer firewalls, DDoS mitigation, and Intrusion Detection Systems (IDS). Our infrastructure uses network segmentation to isolate sensitive data.
2.2 Physical Security
24/7 physical surveillance, biometric access, and geographic redundancy across multiple data centres.
2.3 Vulnerability Management
Scheduled internal audits and penetration testing to identify and remediate risks before exploitation.
3. Data Encryption and Transmission Security
3.1 Data in Transit
All data is protected via SSL/TLS (TLS 1.2/1.3). We enforce HTTPS exclusively and implement HSTS to prevent downgrade attacks.
3.2 Data at Rest
Sensitive identifiers use AES-256 Encryption. Backups are encrypted at rest and accessible only to authorized responders.
3.3 API Security
Endpoints are secured with JWT Token-based Auth, Rate Limiting, and CORS policies to prevent bulk data theft.
4. Account and Login Security
We prioritize your account integrity with the following controls:
- Hashed Passwords: Credentials use salted hashes (bcrypt) — never plain text.
- Session Management: Auto-expiry after inactivity and concurrent login alerts.
- 2FA Support: Multi-factor authentication via OTP to your registered device.
- Secure Reset: Links are time-sensitive and single-use only.
Social Login Security
We use OAuth 2.0 for Google login. List It Now never receives or stores your third-party account password.
5. Payment and Transaction Security
5.1 Secure Payment Processing
All payments are handled by PCI-DSS Compliant third-party gateways. We do not store card numbers or CVV codes. Fraud detection systems monitor for duplicate payments and high-risk origins.
6. Listing and Content Security
6.1 Listing Integrity
Automated content screening for spam and duplicate detection. Images are scanned for malicious code.
6.2 Contact Data Protection
Seller details are hidden behind "Contact Unlocking" to prevent automated web scraping.
7. Agent Account Security
Mandatory Practices for Agents
- Strong unique passwords (no credential sharing)
- Use sub-account features for multi-user teams
- Mandatory logout on shared/public devices
Lead Data Security Obligations
Agents must not export or sell platform-sourced leads. Any data breach involving leads must be reported to List It Now within 48 hours.
8. Third-Party and Integration Security
Third-party access follows the Principle of Least Privilege. We evaluate providers for security compliance before integration and regularly audit data sharing agreements.
9. Security Incident Response
9.2 Incident Classification
10. User Responsibilities
- 1Use a strong, unique password — don't reuse from other sites.
- 2Enable Two-Factor Authentication (2FA) immediately.
- 3Report suspicious listings or charges at once.
- 4Verify we will NEVER ask for your password or OTP.
11. Phishing Awareness
Fraudsters may impersonate List It Now. Verify all emails originate from @listitnow.in. If an offer sounds too good to be true, it likely is.
12. Responsible Disclosure Policy
We welcome reports from security researchers. Please contact support@vybtek.com with steps to reproduce vulnerabilities. We will not pursue legal action for reports made in good faith.
13. Compliance and Regulatory Standards
Compliant with: IT Act 2000 (India), DPDPA 2023, PCI-DSS Standards, and RERA Data Guidelines.
15. Contact and Security Grievance
Operations Centre
Udaipur, Rajasthan, India